7.8

CVE-2016-2521

Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wireshark_application.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges via a Trojan horse riched20.dll.dll file in the current working directory, related to use of QLibrary.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wireshark ≫ Wireshark Version 1.12.0
Wireshark ≫ Wireshark Version 1.12.1
Wireshark ≫ Wireshark Version 1.12.2
Wireshark ≫ Wireshark Version 1.12.3
Wireshark ≫ Wireshark Version 1.12.4
Wireshark ≫ Wireshark Version 1.12.5
Wireshark ≫ Wireshark Version 1.12.6
Wireshark ≫ Wireshark Version 1.12.7
Wireshark ≫ Wireshark Version 1.12.8
Wireshark ≫ Wireshark Version 1.12.9
Wireshark ≫ Wireshark Version 2.0.0
Wireshark ≫ Wireshark Version 2.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.314
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
https://security.gentoo.org/glsa/201604-05
http://www.securitytracker.com/id/1035118
http://www.wireshark.org/security/wnpa-sec-2016-01.html
Vendor Advisory
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4a79cf2e1ab056faaddd252aa56520435b318a56